diff --git content/common/sandbox_win.cc content/common/sandbox_win.cc index 3c8150376bbe..5d505838ec1d 100644 --- content/common/sandbox_win.cc +++ content/common/sandbox_win.cc @@ -783,8 +783,11 @@ sandbox::ResultCode StartSandboxedProcess( #endif // Post-startup mitigations. - mitigations = sandbox::MITIGATION_STRICT_HANDLE_CHECKS | - sandbox::MITIGATION_DLL_SEARCH_ORDER; + mitigations = sandbox::MITIGATION_DLL_SEARCH_ORDER; + if (!browser_command_line.HasSwitch("win-rt-app")) { + // Don't enable this mitigation in WinRT apps. See issue #2274. + mitigations |= sandbox::MITIGATION_STRICT_HANDLE_CHECKS; + } if (base::FeatureList::IsEnabled(features::kWinSboxForceMsSigned)) mitigations |= sandbox::MITIGATION_FORCE_MS_SIGNED_BINS;